Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/i1FsIeYT3Zair0TQKi4yCM6IOG0.roa
File: i1FsIeYT3Zair0TQKi4yCM6IOG0.roa (raw, json)
Hash identifier: mZ9vVUXkP1hNQNf7dg5Nl1KDoZy9tsDYGbmJpJypCM0=
Subject key identifier: 8B:51:6C:21:E6:13:DD:96:A2:AF:44:D0:2A:2E:32:08:CE:88:38:6D
Certificate issuer: /CN=19a6857c5ba3f51dbe38f4c4a0c77c84ff0fb355
Certificate serial: 018B1DC733C24A0E4442FAB8255EDF1AADB9
Authority key identifier: 19:A6:85:7C:5B:A3:F5:1D:BE:38:F4:C4:A0:C7:7C:84:FF:0F:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/i1FsIeYT3Zair0TQKi4yCM6IOG0.roa
Signing time: Wed 11 Oct 2023 08:07:55 +0000
ROA not before: Wed 11 Oct 2023 08:07:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206065
IP address blocks: 185.172.0.0/22 maxlen: 24
185.197.68.0/22 maxlen: 24
188.121.128.0/19 maxlen: 24
92.61.184.0/21 maxlen: 24
109.230.64.0/21 maxlen: 24
37.221.0.0/18 maxlen: 24
37.235.16.0/20 maxlen: 24
91.184.64.0/20 maxlen: 24
94.139.160.0/20 maxlen: 24
37.19.80.0/20 maxlen: 24
37.19.81.0/24 maxlen: 24
185.30.76.0/22 maxlen: 24
109.230.80.0/20 maxlen: 24
45.144.124.0/22 maxlen: 24
92.119.68.0/22 maxlen: 24
45.128.140.0/22 maxlen: 24
213.207.192.0/20 maxlen: 24
81.91.144.0/20 maxlen: 24
2a0c:100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:c7:33:c2:4a:0e:44:42:fa:b8:25:5e:df:1a:ad:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6857c5ba3f51dbe38f4c4a0c77c84ff0fb355
Validity
Not Before: Oct 11 08:07:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b516c21e613dd96a2af44d02a2e3208ce88386d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e5:ac:2f:4f:a2:08:e2:36:e4:fc:ea:f0:78:
ed:f1:d3:29:93:33:44:1a:7b:65:0d:4a:5a:9e:66:
82:78:a6:a9:6b:d7:7f:3e:29:2a:18:f7:ff:76:7d:
84:af:d7:e0:c1:bc:34:63:94:22:80:ec:04:75:31:
75:e7:00:89:69:2f:51:fe:b0:2a:77:7d:43:96:08:
4f:bc:d2:c2:62:61:90:cc:df:2a:21:b3:89:b5:f0:
4a:bd:ec:fa:32:5d:9e:e5:7a:73:83:09:71:a3:1f:
65:0b:f1:86:0f:74:61:bc:6b:34:77:92:fb:c6:db:
84:d3:a2:b0:0c:c4:63:52:e9:62:6e:71:a9:24:0c:
93:5d:59:32:b6:f9:b6:49:a7:7e:1d:06:36:0f:d5:
d6:fe:11:af:7e:46:b5:44:0f:bb:05:4f:7a:5e:9b:
7a:be:28:f1:0b:67:cc:49:9a:ee:61:05:c9:3a:1d:
69:c8:23:90:ef:7e:62:70:e7:38:5e:d3:16:cf:eb:
9a:d8:90:17:c1:02:9f:86:fd:be:8b:bf:b3:fb:8e:
a4:01:6a:b2:7a:cf:89:42:f6:df:af:d2:5a:64:e8:
eb:86:39:9b:43:6d:6e:93:9b:69:ed:a1:f7:6e:4b:
85:c1:58:ee:b3:8b:7d:8d:c6:f7:7e:9c:49:15:77:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:6C:21:E6:13:DD:96:A2:AF:44:D0:2A:2E:32:08:CE:88:38:6D
X509v3 Authority Key Identifier:
keyid:19:A6:85:7C:5B:A3:F5:1D:BE:38:F4:C4:A0:C7:7C:84:FF:0F:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/i1FsIeYT3Zair0TQKi4yCM6IOG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.80.0/20
37.221.0.0/18
37.235.16.0/20
45.128.140.0/22
45.144.124.0/22
81.91.144.0/20
91.184.64.0/20
92.61.184.0/21
92.119.68.0/22
94.139.160.0/20
109.230.64.0/21
109.230.80.0/20
185.30.76.0/22
185.172.0.0/22
185.197.68.0/22
188.121.128.0/19
213.207.192.0/20
IPv6:
2a0c:100::/29
Signature Algorithm: sha256WithRSAEncryption
90:05:04:78:d3:86:6c:4c:a4:67:64:28:64:55:d7:a9:7c:57:
36:cf:1b:2f:2c:33:66:31:ea:18:10:35:6a:01:22:75:69:08:
cc:56:ea:c3:1a:e3:02:32:92:ee:c9:e5:61:96:36:6b:44:e5:
f9:40:ff:94:2f:bd:7b:d7:ca:0f:dc:be:28:88:69:38:05:52:
17:7c:be:df:dd:ab:75:56:cd:64:8f:20:40:fa:cd:4c:53:82:
c7:33:2b:39:49:a0:c9:f7:6d:a9:0d:8f:b7:0e:ca:19:99:d6:
71:89:38:a0:70:76:df:39:69:b6:41:ee:27:8c:2f:ad:90:7b:
d6:56:24:28:31:58:98:0d:d8:cf:76:89:f4:c3:b8:23:07:e0:
90:24:2b:f5:93:0a:c4:8a:2c:48:66:1a:22:45:9c:85:45:93:
4d:62:ee:62:ce:2e:bf:24:96:af:fe:04:da:f2:b0:bb:2e:a4:
d4:0c:93:2c:12:99:c0:73:68:80:35:47:81:4b:4b:72:29:52:
7e:ee:b5:b9:b8:17:5d:23:19:6c:9b:c5:29:ec:21:67:86:9e:
9a:b2:07:fb:51:8b:02:2d:ef:02:05:75:b6:12:8f:99:a6:a1:
2d:5c:7c:bd:c1:a9:ec:1a:9d:19:b3:21:e2:d4:30:c3:d3:47:
5e:d5:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 13:39:04 2023 by rpki-client on console-ams.rpki-client.org